How to protect from sql injection in cakephp 3

How to protect against SQL injection in Cake PHP 3 We have high risks in VAP testing due to SQL injection possibilities. Please provide support to solve this issue.

See Query Builder - 4.x